Method and system for closed chest blood flow support

ABSTRACT

A pumping system for assisting a patient&#39;s heart includes a blood pump disposed outside the patient&#39;s body and having an inlet and an outlet. An inlet cannula is configured for insertion percutaneously into the vascular system of the patient, and in fluid communication with the blood pump inlet to provide blood to the blood pump. An outlet perfusion cannula is configured for insertion percutaneously into the vascular system of the patient, and in fluid communication with the blood pump outlet to provide blood to the patient&#39;s vascular system. A control system is provided to control the blood pump and includes at least two control units for redundant control of the blood pump. Each control unit includes a watchdog for monitoring the control unit. A variation of the pumping system includes a bidirectional cannula for insertion percutaneously into the vascular system of the patient and to extend into the patient&#39;s heart.

CROSS REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.10/969,688, filed Oct. 20, 2004, which is a continuation of U.S. patentapplication Ser. No. 09/661,413, filed Sep. 13, 2000, now U.S. Pat. No.6,808,508.

FIELD OF THE INVENTION

The present invention is related to a cardiac assist system having atransseptal cannula that extends through the atrial septum from theright atrium to the left atrium of the patient and a perfusion cannulathat extends into the arterial system of the patient for circulatingoxygenated blood throughout the patient. More specifically, the presentinvention is related to an extracorporeal blood pump, connected to thetransseptal cannula at the pump inlet and the perfusion cannula at thepump outlet, that pumps blood at specified flow rates over a range ofphysiological pressure and is held in place on the patient's leg.

BACKGROUND OF THE INVENTION

For short term (hours to days) use in supporting significant circulation(1-3.5 LPM) of oxygenated blood, there is a need for simple equipment ina hospital that can be quickly connected to the patient without surgicalintervention and that can provide bypass blood flow to the patient. Thepresent invention provides a quick and relatively simple way ofoperation to assist the heart without an open-chest surgery.

SUMMARY OF THE INVENTION

The present invention pertains to a system supporting circulation ofoxygenated blood. The system comprises a transseptal cannula set adaptedto be inserted percutaneously in the femoral vein and extend through theatrial septum from right atrium to left atrium, a blood pump mechanism,connected to the transseptal cannula through the pump inlet andcontrolled by an external microprocessor based blood pump controller,for pumping blood received from the patient's heart, a perfusion cannulaadapted to be inserted percutaneously in the femoral artery andconnected to the pump outlet for returning oxygenated blood to thearterial system of the patient. The cannula set consists of a cannula, acatheter, and a dilator. The catheter and dilator are used for insertionof the cannula.

The present invention pertains to a method and a process for assisting apatient's heart. The method comprises a step of inserting a transseptalcannula percutaneously in the femoral vein of the patient and extendingthrough the atrial septum from the right atrium to the left atrium. Nextthere is a step of inserting a perfusion cannula percutaneously in thefemoral artery for returning oxygenated blood to the arterial system ofthe patient. Next is preferably a step of connecting the two cannulae tothe pump. Then there is a step of pumping blood with a blood pumpconnected to the transseptal cannula and the perfusion cannula atspecified flow rates over a range of physiological pressures. This steppreferably includes control of the pump and monitoring of the controlsystem and pump by an external pump controller in such a manner as todetect, manage, and alert the user to the applicable potential systemfaults without dedicated human monitoring.

In addition, the system of the present invention can be used to quicklyaccess or redistribute a patient's blood to a certain destination in apatient's body by changing appropriate sizes of cannulae connected tothe pump inlet and outlet.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings, the preferred embodiment of the inventionand preferred methods of practicing the invention are illustrated inwhich:

FIG. 1 is a schematic representation of the transseptal cannula portionof the present invention.

FIG. 2 is a schematic representation of a needle and wire in a secondcatheter in a cannula.

FIG. 3 is a schematic representation of a balloon catheter at the distalend of the cannula.

FIG. 4 is a schematic representation of a pigtail cannula.

FIG. 5 is a schematic representation of a pigtail cannula with astraightening dilatory.

FIG. 6 is a schematic representation of a transseptal sheath over theport of a cannula.

FIG. 7 is a schematic representation of the transseptal sheath retractedfrom the port of the cannula.

FIG. 8 is a schematic representation of an alternative embodiment of aballoon at the distal end of the cannula.

FIG. 9 is a schematic representation of the arterial connection systemof the present invention.

FIG. 10 is a schematic representation of an alternative arterialperfusion cannula of the present invention.

FIG. 11 is a schematic representation of the fluid pathway components ofthe present invention.

FIG. 12 is a schematic representation of an exploded view of the pumpwith the clamp mechanism.

FIG. 13 is a schematic representation of the pump with the clampmechanism.

FIG. 14 is a schematic representation of the pump assembly.

FIG. 15 is a schematic representation of a cross-sectional view of thepump.

FIG. 15 a is a schematic representation of the infusion systemconfiguration.

FIGS. 16 a-16 e are schematic representations of the blood pumpcontroller.

FIG. 17 is a schematic representation of a cross sectional view of thepump with a flow probe.

FIG. 18 is a schematic representation of the holding mechanism with thepump on the leg of a patient.

FIG. 19 is a schematic representation of the holding mechanism.

FIG. 20 is a schematic representation of the holding mechanism with thepump on the leg of the patient.

FIG. 21 is a schematic representation of the pump in a normal positionon the leg of a patient.

FIG. 22 is a schematic representation of the pump at an angle of 20degrees from normal on the leg of a patient.

FIG. 23 is a schematic representation of the holding mechanism with thepump on the leg of the patient.

FIG. 24 is an illustration of how the ML4428 pulse train is processed.

FIG. 25 is an illustration of pressure and pressure variation waveforms.

FIG. 26 a is a graph of pressure versus flow of the blood pump.

FIG. 26 b is a graph of flow rate versus pressure drop.

FIG. 26 c is a graph regarding pump inlet pressure.

FIGS. 27 a-27 c are schematic representations of the components of thecannula set.

FIG. 28 is a schematic representation of slow start circuitry.

FIG. 29 is a schematic of timing circuitry.

DETAILED DESCRIPTION

Referring now to the drawings wherein like reference numerals refer tosimilar or identical parts throughout the several views, and morespecifically to FIG. 11 thereof, there is shown a system 300 forassisting flow of blood by a patient's heart. The system 300 comprises atransseptal cannula 12 adapted to be inserted percutaneously in thefemoral vein and extend through the atrial septum from the right atriumto the left atrium. The system 300 comprises a perfusion cannula 100adapted to be inserted percutaneously in the femoral artery. The system300 comprises a blood pump mechanism 30 having a blood pump 316 (drivenby a brushless DC motor), connected to the transseptal cannula 12 at thepump inlet, for pumping oxygenated blood received from the left atriumthrough the transseptal cannula 12 and returning the blood to thearterial system of the patient through the perfusion cannula 100connected to the blood pump 316 at the pump outlet. The blood pump 316is controlled by a controller 332 that monitors key system operatingparameters to detect and manage faults and to alert operators.

Fault tolerance of the system is offered by providing redundantmechanisms for pump operation and for monitoring functions. Pumpoperation must propel blood at sufficient flow rates (1-3.5 LPM) withoutdestroying red blood cells, without causing clotting of the blood,without causing immune system or other biocompatibility compromise orreaction, and must locate and center themselves without offering a wearsurface that can cause blood damage or clotting over time or can causevariable power loss over time, as power loss is used as a performancemonitor. Reliable operation must be maintained even through a widevariety of system, component, or human faults.

The AB-180 XC System, as it is referred to, offers atraumatic contactwith red blood cells by virtue of the smooth surface finishes of theblood contacting surfaces, the gradual radiuses of the impeller, anddoes not allow locations for stagnant blood to accumulate and formclots. In addition to these smooth geometries, it is designed to beplaced within 3 feet of the blood egress from the body, as the smallamount of artificial material minimizes complications. To providefurther resistance to thrombus formation, an anti-coagulant is infuseddirectly into the blood chamber of the pump, where concentration ofanti-coagulant is high enough to deter clotting. But since the pumpvolume is small, the amount of infused anti-coagulant is small enough toachieve minimal effect on systemic concentration of anti-coagulant whenthe blood flowing out of the pump is disbursed throughout the body. Thisis important, as the anti-coagulant concentration throughout the body isthen small enough to prevent additional risk of internal bleedingelsewhere in the patient. Clots can also form when blood flow drops tolow rates (<0.5 LPM), which can happen if the transseptal cannulabecomes clogged or kinked, if the patient bleeds internally, or if acannula becomes dislodged. Any of these events cause an alarm conditionfrom the reduced blood flow.

Pump wear is a major issue with blood pumps, as any wear can cause blooddamage and/or clotting. The infusion system used to infuseanti-coagulant into the blood chamber also performs a useful bearingfunction. While the main bearing function, or centering and locating ofthe rotating part of the pump, is performed by the interaction of thestator and rotor electromagnetic interactions, the rotating impeller isalso centered by a) the impeller/seal sliding contact and b) the fluidfilm and fluid lift pads in the motor chamber. Whenever the rotorbecomes out of center, the fluid film prevents rotor and stator contact,thus providing fault tolerance of the electromagnetics. In the motorchamber, the fluid film is propelled radially as the rotor rotates. Aslift pads are encountered in the lower chamber surface, fluid ispropelled axially into the surface of the rotor, thus ‘lifting’ it awayfrom the stator surface, where contact would cause wear. This fluid ispumped by a constant flow pump, which provides a stable flow of infusateinto the lower chamber. This constant flow builds pressure in the lowerchamber, and as this pressure exceeds the pressure across the seal inthe upper, or blood flow chamber, the infusate is pressed through theseal and into the blood chamber, where the anti-coagulation preventsclotting. The infusate fluid thus provides a third bearing mechanism anda cooling mechanism for the seal/rotor contact area. Loss of infusateflow can then be used as an indicator of a fault in the bearing system,which can then allow a user alarm to correct the infusate system or thepump bearing system prior to any patient injury. The mechanism of thedetermination of infusate flow is described elsewhere.

Another mechanism for system fault is the presence of air in the system,which can happen in some circuits when the pressure is reduced todangerous levels. This can occur in larger pumps or in longer andsmaller cannula, which involve more pressure drop. The pump design, byits small size, prevents any such cavitation by means of low pressure.The mechanism of connections between the components prevents anyinjection of air into these joints, which can occur with the negativepressure associated with high pressure drop and long, small diametercannulae. Without this mechanism of connection, and by connectingarbitrary components, dangerous pressures can result and can causecavitation and/or air injection at the connection joints.

The flow characteristics of the Pump over a range of conditions,performed with perfusate at the viscosity of 3.5 cP (35% Glycerol+65%Saline @23° C.) is shown in FIG. 26 a. The flow rates represent therelationship, between RPM and the pressure differential between theinflow port and the outflow port. An estimated flow rate can bedetermined by using this chart, the RPM of the Pump and the pressuredifferential of the inlet to outlet ports. The pressure dropcharacteristics of the transseptal cannula are shown in FIG. 26 b, withthe box indicating the limits as specified with the AB-180 pump. The keyissue is that the low pressure rise of the pump, in combination with thepressure drop of the cannula, does not allow any point in the circuit toobtain pressures lower than −350 mmHg, which is the point at which gasescan be removed from the blood solution. Including the flowcharacteristics of the pump, the transseptal cannula, and the possiblesizes of perfusion cannulae, the vacuum pressure created at the pumpinlet can be solved at different pump speeds as shown in FIG. 26 c.Since the pump inlet pressure is always higher than −350 mmHg,cavitation will not happen in the system over the recommended flow rangeagainst physiologic pressure.

All electrical control functions are redundant to provide enhancedreliability. And alarms are used to notify operators of potentiallyunsafe conditions rather than to stop the pump until replacement ofcontrol is maintained. All power systems are duplicated, and all controlsystems are watch-dogged to warn of failures of standby monitorfunctions. Without these failsafe operations, tolerance of system,component, or human faults could not be offered.

Preferably, the blood pump mechanism 30 includes a transseptal clampmechanism 322 which clamps the blood pump 316 to the transseptal cannula12 to avoid undesired disconnection of the blood pump 316 and thetransseptal cannula 12, as shown in FIGS. 17 and 18. The blood pump 316,during operation, is preferably adapted to be within three feet of wherethe transseptal cannula 12 and the perfusion cannula are positioned toenter the patient. Preferably, the blood pump mechanism 30 includestubing 324 which connects the blood pump 316 to the transseptal cannula12 and the perfusion cannula 100 and the clamping mechanism clamps thetubing 324 between the blood pump 316 and the transseptal cannula 12.The tubing 324 has a continuous smooth inner surface 326.

Alternatives of the tubing 324 include:

a piece of tubing that connects the transseptal cannula to the pumpinlet port and a piece of tubing that connects the arterial cannula tothe pump outlet port,

a quick connection device with a seamless connection (smooth without astep) to, minimize the potential for thrombus formation and a lockmechanism to avoid inadvertent disconnection that can directly connectthe transseptal and arterial cannulae to the pump,

tubing integrals on the transseptal and arterial cannulae which can beplaced over the barbs of the inflow and outflow ports of the pump andcan be secured with a clamping mechanisms to the barbs at the pump inletand outlet ports.

Preferably, the blood pump 316 pumps a continuous flow of blood. Theblood pump 316 preferably has a rotor 328 and a stator 330, as shown inFIGS. 14 and 15. Preferably, the blood pump mechanism 30 includes acontroller 332 connected to the blood pump 316 through which theoperation of the blood pump 316 is adjusted, as shown in FIGS. 16 a, 16b, 16 c, 16 d and 16 e. The blood pump 316 includes an impeller 334which moves against the blood, and the user adjusts the operation of theblood pump 316 by changing impeller 334 speed. Preferably, thecontroller 332 measures flow of blood from the pump only from impeller334 speed and stator 330 current. Alternatively, the blood pumpmechanism 30 includes an electromagnetic or ultrasonic flow probe 336 incommunication with the blood pump 316 and the controller 332 measuresflow of blood through the pump with the electromagnetic or ultrasonicflow probe 336, as shown in FIG. 17.

Preferably, the pump has a hydrodynamic bearing 338 between the rotor328 and the lower housing 330, shown in FIG. 15. The blood pumpmechanism 30 preferably includes a fluid reservoir 340 and a fluid pump342 connected to the fluid reservoir 340 and the blood pump 316 to pumpfluid to the hydrodynamic bearing 338 in the blood pump 316. Preferably,the fluid reservoir 340 includes predetermined concentrations of drugs.See U.S. Pat. No. 5,711,753 for a more complete discussion of the pump316, incorporated by reference herein, except the occluder describedtherein is not needed in the extracorporeal application.

The pump controller 332 preferably provides current to the blood pump316 and the controller 332 includes a battery 344 that provides energyto run the controller 332 and the blood pump 316. The battery 344 isused for powering the blood pump 316 and controller 332 when the patientis being moved between remote locations. Preferably, the blood pump 316is made of biocompatible materials which have no effect on blood or thepatient. See the Appendix. The blood pump 316 is preferably acentrifugal pump or an axial pump. Alternatively, a pulsatile flow maybe obtained by modulation of pump speed through controller 332 andsynchronizing impeller speed variation with the patient's beating heart.

Alternatively, the blood pump 316 is a pulsatile, electrical orpneumatic pump having an inflow valve and a perfusion valve. Farrar, D.J., Compton, P. G., Lawson, J. H., Hershon, J. J., Hill, J. D., “ControlModes of a Clinical Ventricular Assist Device”. TREE Engineering inMedicine and Biology Magazine, pp. 19-25, vol. 5, 1986, incorporated byreference herein. Preferably, the blood pump mechanism 30 includes acontroller 332 connected to the blood pump 316 through which theoperation of the blood pump 316 is adjusted. The pump is preferably apulsatile pump having a stroke time, and the controller 332 adjusts theoperation of the blood pump 316 by adjusting stroke time. Preferably,the pump controller 332 provides current to the blood pump 316 and thecontroller 332 includes a battery 344 that provides energy to run thecontroller 332 and the blood pump 316, the battery 344 is used forpowering the blood pump 316 and the controller 332 when the patient isbeing moved between remote locations.

Preferably, the system 300 includes a holding mechanism 346 which holdsthe blood pump 316 and attaches to the patient, as shown in FIGS. 18-23.The holding mechanism 346 preferably includes a pump holding portion 348which holds the pump and a patient portion 350 which is adapted to fitto the leg 352 of the patient and to secure to the pump holding portion348. Preferably, the pump holding portion 348 is made of plastic havingan imprint 352 of the shape of the blood pump 316 in which the bloodpump 316 fits to be held by the pump holding portion 348, and thepatient holding portion 348 includes a band 354 with loops and withstraps 356 having hooks adapted to wrap about the leg 352 and the pumpholding portion 348 to hold the pump holding portion 348 to the leg 352.The holding mechanism 346 is preferably adapted to attach to either leg352 of the patient and allow inflow or outflow to be connected to thecontralateral side of the patient. Preferably, the holding mechanism 346is adapted to hold the blood pump 316 in a normal position or at anangle of 20 degrees from the normal position.

The present invention pertains to a method for assisting flow ofoxygenated blood. The method comprises the steps of insertingpercutaneously in the femoral vein of the patient and extending throughthe atrial septum from the right atrium to the left atrium a transseptalcannula 12. Next there is the step of inserting percutaneously in thefemoral artery a perfusion cannula 100 for returning oxygenated blood tothe arterial system 300 of the patient. Then there is the step ofpumping blood with a blood pump 316 connected to the transseptal cannula12 and the perfusion cannula 100 at specified flow rates over a range ofphysiological pressures with performance monitoring to offer faulttolerance and management.

The transseptal cannula set contains:

1-21 Fr. Percutaneous Venous Transseptal Cannula (PVTC)

1-13 Fr. Percutaneous Venous Transseptal Catheter

1-14/21 Fr. Percutaneous Venous Transseptal Two Stage Dilator

The following instruments are needed to complete the procedure andshould be supplied by the user (all are standard in the art):

Introducer Needle

Guidewire, super stiff, 0.035 in., at least 260 cm long.

Transseptal Puncture Kit

Transseptal Catheter/Dilator (as needed).

Components of the cannula set are shown in FIG. 27.

The transseptal cannula is inserted in the following manner:

Prior to performing the procedure, insert the PVTC Catheter into thePVTC Cannula assuring that the Cannula fitting on the Catheter fitssnugly and is fully inserted into the ⅜ in. barbed connector of theCannula. Assure that the tip of the Catheter is extended fully from theCannula.

Use standard transseptal puncture technique to gain access into the leftatrium from the femoral vein.

Dilate the transseptal puncture site (fossa ovalis) with a transseptalpuncture catheter in the usual manner.

Introduce the 0.035 in. guidewire into the left atrium. Verify that theguidewire is in position in left atrium.

Verify patient ACT is in excess of 400 seconds.

Remove the transseptal puncture catheter.

Advance the Two Stage Dilator over the guidewire into the left atrium todilate the fossa ovalis. Monitor progress using fluoroscopy to assurethat the tip does not penetrate the atrial chamber.

Remove the Two Stage Dilator.

Advance the PVTC Catheter/Cannula assembly over the guidewire into theleft atrium.

Position the PVTC Cannula tip in the left atrium using fluoroscopy.Assure that all of the drainage holes are in the left atrium and themarker band is near the septum.

Remove the guidewire and Catheter together to allow the cannula to beback filled with blood.

Clamp the adapter of the PVTC Cannula on the clamping area of the clearadapter.

The arterial cannula is inserted in the following manner

Introduce an arterial guidewire into the artery location chosen.

Advance the arterial cannula over the guidewire into the artery.

Verify the blood is arterial blood.

Remove the guidewire.

Clamp the cannula to prevent blood loss prior to connection to the bloodpump.

The extracorporeal circuit is connected to the pump in the followingmanner:

Connect appropriate length standard ⅜ in. extracorporeal blood circuittubing to the inflow and outflow ports of the Pump.

Connect the inflow tubing to the inflow cannula.

Release the inflow cannula clamp and prime the Pump and outflow tubingwith blood. Clamp the outflow tubing ensuring no air between the inflowcannula and the clamp on the outflow tubing.

Make a wet to wet connection of the outflow tubing and the outflowcannula.

If there is a vent on the outflow cannula, aspirate any final air fromthe extracorporeal blood circuit.

If there is no vent on the outflow cannula, inspect the extracorporealcircuit for air. If there is any air, break and remake the wet to wetconnection of the outflow tubing and outflow cannula until all of theair is purged from the extracorporeal blood circuit.

Secure all tubing connections with sta-straps.

Release the hemostat on the outflow tubing followed by the hemostat onthe inflow cannula.

Adjust pump speed to desired setting and place Pump in Mounting Assemblyand secure to patient's leg.

Preferably, before the pumping step, there is the step of clamping atransseptal clamp mechanism 322 to the transseptal cannula 12 and theblood pump 316 to avoid undesired disconnection of the blood pump 316and the transseptal cannula 12. Before the pumping step, there ispreferably the step of positioning the blood pump 316 within three feetof where the transseptal cannula 12 and the perfusion cannula 100 areinserted into the patient.

Preferably, the pumping step includes the step of pumping a continuousflow of blood with the blood pump 316. Preferably, the pumping stepincludes the step of adjusting the flow of blood pumped with acontroller 332 connected to the blood pump 316. The adjusting steppreferably includes the step of adjusting impeller 334 speed of animpeller 334 of the blood pump 316 to attain a desired flow of blood inthe patient due to the operation of the blood pump 316. Preferably,after the pumping step, there is the step of powering the controller 332and the blood pump 316 with a battery 344 as the patient is moved from afirst location to a second location remote from the first location.

Before the pumping step, there are preferably the steps of attaching aholding mechanism 346 for the blood pump 316 to the patient and placingthe blood pump 316 in the holding mechanism 346 to hold the blood pump316 in place relative to the patient. Preferably, the attaching stepincludes the step of attaching the holding mechanism 346 to the leg 352of the patient. The placing step preferably includes the step ofwrapping straps of a band 354 positioned about the leg 352 of thepatient, about the blood pump 316, and fixing hooks 360 of the straps toloops 358 of the band 354 to secure the blood pump 316 to the leg 352 ofthe patient.

Alternatively, the pumping step includes the step of pumping pulses ofblood through the patient with a pulsatile pump. The pumping step thencan include the step of adjusting stroke timing of the pulsatile pump toobtain the desired pulse of blood flow through the patient.

In the operation of the invention, and referring to FIGS. 1, 2 and 3,the distal end 14 of the transseptal cannula 12, is inserted into apatient and moved to the right atrium of the patient's heart via thefemoral vein, as is well known in the art. Generally, this occurs in thefollowing way. The guide wire 30 is introduced into the patient andthreaded to the right atrium of the patient. The cannula 12, the secondcatheter 60 (with the needle 58 disposed in the second catheter 60) areplaced over the end of the guide wire 30 extending from the patient viathe orifice 18 and the opening in the second catheter 60. The cannula 12and second catheter 60, with the needle 58 inside the second catheter60, are then inserted and moved along the guide wire 30 to the rightatrium of the patient. When the distal end 14 of the cannula 12 is inthe right atrium, the guide wire 30 is pulled back 46 into the cannula12 freeing the orifice 18 so there is nothing in the orifice 18. Theneedle 58 is then advanced, as is the second catheter 60 through theorifice 18 so the second catheter 60 extends through the orifice 18 ofthe cannula 12 and the needle 58 extends through the opening of thesecond catheter 60. The needle 58 and second catheter 60 are then forcedinto the septum until they puncture the septum and move into the leftatrium. The needle 58 is then retracted from the opening of the secondcatheter 60 and the guide wire 30 is moved forward through the secondcatheter's opening into the left atrium. The second catheter 60 ismaintained in position while the guide wire 30 is maintained in place inthe left atrium. The cannula 12 is then advanced forward into the leftatrium along the guide wire 30 and the second catheter 60 which extendthrough the orifice 18. The presence of the second catheter 60 acts as astiffener for the cannula 12 to assist in the placement of the cannula12 in the left atrium. The second catheter 60, needle 58 and guide wire30 are then removed from the cannula.

Preferably, the transseptal cannula 12 connection step includes the stepof connecting the transseptal cannula 12 to the tubing 324 connected tothe blood pump 316. Preferably, prior to clamping the clamping mechanism322 to connect the tubing 324 to the transseptal cannula 12, there arepreferably the steps of filling the transseptal cannula 12 with bloodand confirming proper transseptal cannula 12 position by visualizingblood color, as is well known in the art.

It should be noted that the aforementioned procedure can be performedwithout the introducer catheter. Instead, the second catheter 60 actswith a dual purpose, as the introducer catheter and the second catheter60. In this case, the needle 58 and guide wire 30 are together insertedin the second catheter 60, and the introducer catheter is not present.When the second catheter 60 and needle 58 puncture the septum and moveinto the left atrium, the second catheter 60 remains in place and theguide wire 30 and the needle 58 are removed to clear a blood flowpassage through the second catheter 60. This apparatus of secondcatheter 60, guide wire 30 and needle 58, without any of the otherfeatures described herein on the cannula 12, or with some or all ofthem, in and of itself can be used to access the left atrium. Again, theadvantage of the combination of elements, is that it can serve to accessthe left atrium without having to take turns pulling the guide wire 30out and then inserting the needle 58 into the second catheter 60 sincethe guide wire 30 and the needle 58 are together present in the secondcatheter 60 simultaneously; and the second catheter 60 serves a dualpurpose of being the introducer catheter and second catheter 60, withoutneeding the introducer catheter. Alternatively, the needle can beinserted into the second catheter 60 after the second catheter hasreached the right atrium.

During the process of moving the cannula 12 to the right atrium,removing the guide wire 30 from the orifice 18 and extending the needlethrough the orifice 18, an imaging device, external to the patient isimaging the location of the orifice 18 (and during the entire procedure)by noting where an end marker 34, disposed about the orifice 18, islocated in the patient. Such an imaging system, for instance with theend marker 34 being radio opaque, is well known in the art. If it isdesired, the guide wire 30 or a portion thereof, such as the tip of theguide wire 30, and/or the needle 58 or a portion thereof, such as thetip of the needle 58, can also be enhanced for imaging purposes, forexample by having a radio opaque material, so the guide wire 30 andneedle 58 can also be followed as they move through the patient.

Once the orifice 18 is positioned in the left atrium and the port 20 ofthe cannula 12 is positioned in the right atrium, a balloon 52 disposedadjacent the orifice 18 is inflated with saline, as shown in FIG. 3,which travels along an inflation tube 54 that runs the length of thecannula 12 along the outside of the cannula 12 to a saline supply 87disposed outside of the patient. The inflated balloon 52 serves toprevent the distal end 14 of the cannula from puncturing an atrium wall50 of the left atrium where the distal end 14 of the cannula is nowdisposed, for instance when the patient is being turned or moved. Theinflated balloon 52 also serves to prevent the cannula 12 from slippingback into the right atrium at undesired times, such as when the patientis being turned or moved about. The balloon 52 can be deflated byremoving the saline that has been introduced into it through theinflation tube 54, back out of the inflation tube 54 with negativepressure applied to the end of the inflation tube 54 extendingexternally from the patient. In another embodiment of a balloon 52 withthe cannula 12, as shown in FIG. 8, the balloon 52 is disposed at thedistal end 14 of the cannula 12.

Alternatively, a pigtail cannula 78, as shown in FIG. 4, can be usedwhich has its distal end curling about. As long as a straighteningdilator 80 or needle 58 is present in the pigtail cannula 78, thepigtail cannula 78 is straight, as shown in FIG. 5. As soon as thedilator 80 is removed, the pigtail cannula's distal end curls about toachieve the same results as the inflated balloon 52. See U.S. Pat. No.5,190,528 titled “Percutaneous Transseptal Left Atrial CannulationSystem” by James D. Fonger et al. and PCT patent application numberPCT/US00/13601, incorporated by reference herein, for furtherinformation about a transseptal cannula and its use.

Alternatively, a transseptal sheath 82 positioned about the cannula 12can be used, as shown in FIG. 6. When the transseptal sheath 82 is in aclosed position, it covers over the port 20 so no blood can pass throughthe port 20. When the transseptal sheath 82 is in an open position,meaning it has been retracted by being pulled on from outside thepatient, the transseptal sheath 82 has moved away from the distal end 14exposing the port 20, as shown in FIG. 7. The extent the transseptalsheath 82 has been retracted determines how much of the port 20 isexposed. The transseptal sheath 82 can also have a marker at its end,and the cannula 12 can have gradations which are marked to identifywhere the end of the transseptal sheath 82 is relative to the cannula12.

Holes 32 having an elongate shape and disposed essentially in parallelwith the axis of the cannula 12 and between the orifice 18 and the port20 further facilitates movement of blood into and out of the cannula 12.The elongate shape of the holes 32 minimizes damage to the cellularstructure of the blood cells as they pass through the holes 32.Furthermore, all openings, such as the orifice 18 and the port 20, aremade as smooth as possible and are made of bio-inert materials such asplastic or steel to minimize or preclude the clotting of blood. In thisway, access to the left and right atriums of the patient is achieved forwhatever purpose, such as the attachment of a pump to the cannula 12.

The perfusion cannula 100 connected to the pump mechanism 30, as shownin FIG. 9, is inserted into the femoral artery of a patient so thedistal end 116 of the tube 112 of the perfusion cannula 100 is disposedin the femoral artery, as is well known in the art. See U.S. Pat. No.5,330,433 titled “A Bidirectional Femoral Arterial Cannula” by James D.Fonger et al. and U.S. patent application Ser. No. 09/400,800,incorporated by reference herein, for further discussions and use of aperfusion cannula.

Preferably, the perfusion cannula 100 connection step includes the stepof connecting the perfusion cannula 100 to the tubing 324 connected tothe blood pump 316. Preferably, the connection step includes the step ofpriming the perfusion cannula 100. Preferably, prior to clamping theclamping mechanism 322 to connect the tubing 324 to the perfusioncannula 100, there is the step of filling the perfusion cannula 100 withoxygenated blood.

Selecting the size of perfusion cannula depends on patient's body size.A bigger size of perfusion cannula can allow higher blood flow rate andthus unloading the patient's heart better. However, if the perfusioncannula size is too big, the cannula may block the blood stream throughpatient's leg. It is desirable to choose an appropriate perfusioncannula size such that the total blood flow rate through the cannulabetween 1 and 4 L/min, preferably 1 to 3.5 L/min. In addition, the bloodstream through patient's leg between femoral artery and the perfusioncannula should have the flow rate between 100 ml/min and 500 ml/min,preferably 200 ml/min to 400 ml/min.

Prior to pump attachment, the two chambers (upper and lower) of the pumpare primed to prevent air from being pumped into the patient afterattachment to the other system components. The lower chamber uses fluidinfusate to provide a bearing function that prevents motor wear,provides cooling, and provides anti-coagulation directly to the upperchamber, where blood flows during operation. First, the infusate line isprimed with sterile infusate from the infusate supply system. The lowerchamber, or motor chamber, is then filled with sterile infusate from theinfusate line. A syringe is used to push fluid through the infusatesystem and into the lower chamber. The pump is then started, with thepumping action pulling all air through the seal separating the upper andlower chambers. Alternately, a syringe with two way stopcock can be usedto suck air out of the lower chamber prior to filling with infusate. Theupper chamber, or blood flow chamber, is filled with saline from eitherthe inflow or outflow port. Owing to the low pump volume, this can beaccomplished with saline.

Once the transseptal cannula and the perfusion cannula are in positionin the patient, the blood pump 316 is connected to them, as shown inFIGS. 11-13. Connection of the blood pump 316 to the transseptal cannulaand the perfusion cannula is accomplished with tubing 324 that extendsbetween the input cannula of the blood pump 316 and the transseptalcannula, and the output cannula of the blood pump 316 and the perfusioncannula. The tubing 324 is secured in place by the clamping mechanism322 that clamps the tubing to the respective elements. The clampingmechanism 322 is used to avoid inadvertent disconnection of the elementsand the tubing and to prevent leakage of air into the system. The bloodpump 316 is positioned in close proximity, within 3 ft. to the ends ofthe perfusion cannula and the transseptal cannula which extend from thepatient to minimize the system blood volume and to minimize heat loss ofthe blood in the extracorporeal portion of the system. The tubing 324from the perfusion cannula and the transseptal cannula is designed sothere is no step transition from the pump housing to the connectingtubing that would tend to create areas of low blood flow.

The blood pump 316 is placed into an imprint 352 of the holding portion348 which corresponds to the shape of the blood pump 316, as shown inFIGS. 18-23. The holding portion 348 is placed on a band 354 about thepatient's leg 352. Straps 356 of the band 354 are then placed over theblood pump 316. Loops 358 on the straps 356 are connected to the hooks360 on the band 354 to secure the straps 356 on the band 354, thusholding blood pump 316 securely to the patient. The holding mechanism346 comprising the holding portion 348 and the band 354 can be attachedto either of the patient's legs and allows for inflow or outflowcannulation to the side opposite the pump fixation to the leg. Theholding mechanism can fix the blood pump 316 in a position normal to theleg of the patient, or rotated 20 degrees from the normal to thepatient's leg.

The blood pump 30 is a continuous flow blood pump, electrical in natureand magnetically driven having a rotor 328 and a stator 330. The bloodpump components are constructed from biocompatible materials suitablefor blood contact for periods of up to 14 days.

The primary function of the pump mechanism 30 is to pump blood. The pump316 provides a range of volumetric flow rates from 1 to 4 l/min. over amean arterial pressure range of 60 to 100 mmHg with a minimum of 5 mmHgleft atrium filling pressure in persons with body surface areas (BSA)between 1.2 and 2.7 sq. meters. This is accomplished by the regulatedrotation of the impeller at speeds of 3000 to 7500 rpm.

Secondary functions of the pump mechanism 30 provided by the controller332 include:

Provide a fluid bearing and localized heparin in the pump.

Provide a system to monitor the fluid bearing infusate supply.

Provide a system to monitor the blood flow rate through the pump 316.

Provide a system to power the device.

Provide a system to interface to user.

Provide a performance monitor and alarm system.

Provide a software-based control system.

Alarm conditions are detected by the CPU and communicated to the userthrough audible and visual alarms on the controller display.

For single system faults, when a monitored system parameter goes outsidean acceptable operating range, an alarm condition is set and a standardalarm sequence is started. The alarm is first issued by turning on anaudible alarm device, turning on a flashing red alarm LED and displayingone or more related alarm messages on the display.

In case of multiple alarms, each time a new parameter goes out of range,a new audible alarm and flashing indication are generated. The alarmlist fills top to bottom, that is, a new alarm message is added to thebottom of the alarm list and earlier alarm messages maintain theirposition on the list. The operator may be able to mute the alarm and theflashing LED may become steady, depending on the alarms present. Asalarm conditions are cleared, the related alarm message is removed fromthe display but the alarm LED remains light. Only when all alarmconditions have been cleared, the red LED turns off. If the number ofsimultaneous alarms exceeds the available lines on the display, normally13, then no new alarms appear on the display until previous alarmsclear. The audible alarm as well as the alarm LED are still activated inthe event of a new alarm condition during a alarm message overflow.

All muted Alarms reactivate within 2 minutes if the alarm conditionpersists.

A type 1 alarm condition is an indication that some critical pumpelectrical parameter has gone outside the acceptable operating range. Astandard alarm sequence is started and pump power is removed. Theoperator is able to mute the audible alarm but the light still flashesif a type 1 alarm is present.

Pump parameter checking only occurs when the pump is turned on but notstart until after a brief delay to allow the pump speed to settle to thedesired setpoint. Battery monitoring is always active.

Type 1 alarm messages will clears if a pump restart is attempted.

A type 2 alarm condition is a warning to the operator that some systemparameter is approaching or has produced an unacceptable operatingcondition. A standard alarm sequence is started but the pump is notstopped. The operator is able to mute the audible alarm and the redlight will change from flashing to steady if no type 1 alarm is present.If the alarm condition is cleared either by the operator or naturalcircumstances, the alarm clears.

The blood pump has a hydrodynamic bearing 338 between the rotor and thelower housing. See FIGS. 14 and 15. A lubrication system is used for thebearing. The purpose of the lubrication system is to provide a fluidbearing to the internal components of the pump and to provide alocalized concentration of heparin to the blood in the interior of thepump for prevention of thrombus formation.

Heparin is injected into a 1000 ml I.V. bag of sterile water (i.e., theinfusate). The infusate flows through the I.V. set tubing, to theinfusion tubing within the infusion pump in the controller. Thisinfusion pump forces the infusate, at a constant rate of 10 ml/hr.,through a bacteriologic filter, the 12 ft. of lube tubing in theexternal communicating line and into the lower housing as shown in FIGS.15-15 a.

The infusate in the lower housing flows between the rotor assembly andjournal to provide a fluid bearing, thereby lubricating thesecomponents. The infusate flows from the lower housing through the centerhole in the baffle seal and into the blood chamber. As a result ofpositive infusate fluid flow, blood will not pass below the seal intothe lower housing. This infusate provides a localized source of heparinto the blood in the pumping chamber. This is shown in FIG. 15.

Blood pumps must not destroy red blood cells, must not cause clotting ofthe blood, and must locate and center themselves without offering a wearsurface that can cause red cell damage or clotting over time. Thelocation function must also prevent undesired contact between rotor andstator parts, which can cause pump heating, particulate accumulation inthe blood, or pump seizure. The fluid bearing provides a force thataligns the rotating surface to be in the center of the stator, thuspreventing contact. The closer the rotor and stator parts come to eachother (as a result of electromagnetic forces due to motor operation ordue to faults or inconsistencies in the components), the greater theforce provided by the fluid, as generated by the flow and the geometriesof the bearing surfaces. This centering force provides fail safecentering and location. The primary single point fault in this system isthe loss of infusate flow, which is detected well in advance by theinfusion management system, described elsewhere. If diluted with ananti-coagulant, the flow of this infusate also provides an anti-clottingmechanism directly to the pump blood chamber, where it is most needed.Without this anti-coagulation, the patient must be provided with asystemic anti-coagulation, which affects the clotting of all the bloodin the patient. This carries the risk of internal bleeding. With theanti-coagulation involved with the infusion system of the AB-180 XCSystem, the concentration of anti-coagulation is large while it is inthe blood chamber of the pump but is small by the time it is dilutedwith the other blood in the body. Therefore, the risk of internalbleeding associated with systemic anti-coagulation is negated.

The infusate supply is monitored by four distinct systems: 1) bag weighsystem, 2) I.V. set drip chamber observation, 3) lube line pressuremeasurements, and 4) air detector. The purpose of the bag weigh systemis to provide a monitoring and alarm system to alert the user of a lowinfusate volume condition because infusate flow is required forlubrication of the fluid bearing between the journal seal and theimpeller shaft and to provide a constant infusion of heparin into theupper housing of the pump for localized anticoagulation.

A 1000 ml of sterile water containing 90,000 units of heparin provides90 hours of operation before a warning alert is initiated. A largesafety margin has been provided by designating a warning alarm to besounded and displayed on the controller when the infusate volumeremaining in the I.V. bag is 100±10 ml. This provides a maximum 10 hourinterval before a run-dry condition could occur. A drip chamber has beenprovided in the design of the lubrication system so that visual checkscan be made by bedside personnel that fluid is constantly leaving theinfusate bag.

A third layer of protection is the warning alarm system based on thepressure measured in the lubrication system during pump operation. Highand low pressure alarm warning limits provide safety by warning theoperator that the lube line may have become disconnected (low pressurewarning) or that the lube line may be kinked or the particulatebacteriologic filter has become clogged and needs to be changed (highpressure warning).

In order to mitigate the hazards associated with the infusion system andto manage the infusate delivery, a multi-alarm system has beenimplemented. This system is based on monitoring the infusion pumpoperation, monitoring pressure in the infusion line, and monitoring forany air, at the most downstream location that is practical, in the line.

Although the infusate flow rate is too low for conventional flowmeasurement techniques, infusion system operation can be confirmedconsidering the cyclical nature of the pressure in the infusion linedownstream from the infusion pump. As the infusion pump rotates one fullcycle, the pressure in the downstream line also cycles accordingly.

By measuring pressure in the downstream line, high pressure conditionscan be monitored that would signal a kink or an occlusion in the line,and the frequency of pressure variation and the slope of that variationcan be measured. The waveforms of pressure and pressure variation areshown in FIG. 25.

The frequency of the pressure variation within the infusion line is ameasure of the speed of the infusion pump rotation, and it can bemeasured either by counting the number of zero crossings of thederivative of pressure or by measuring the time between consecutive zerocrossings of pressure. The derivative of pressure is calculated as thedifference in two discrete pressure measurements divided by the timebetween those measurements.

A high or low frequency of the pressure waveform indicates an infusionpump which is rotating faster or slower than normal, indicating aninfusion flow rate which is out of specification.

The slope of the pressure variation is related to the infusate flow rate(i.e., below a specified limit) and can be used to detect a low flowcondition. If the magnitude of dP/dt is ‘low’ for an extended period,then the infusate flow rate is considered to be low. Generally, thissituation occurs when the infusion pump is pushing into an open line(constant, ambient pressure in the infusion line) or a kink in the lineupstream to the infusion pump has stopped supplying fluid.

Specifically, alarms are generated by the infusion monitoring systemunder the following conditions:

HIGH INFUSION RATE

LOW INFUSION RATE

LOW LUBE FLOW (infusion pump stopped)

LUBE LINE OPEN (if air>=2 ul detected in the line).

LUBE OFFSET ERROR (see following discussion of pressure transducer).

LUBE PHASE SHIFT (if the time between successive zero crossings ofderivative of the pressure is out of spec.)

LUBE PRESSURE HIGH

LUBE VOLUME LOW (if lube volume<90 ml, or 9 hours of infusate supply)

LUBE XDUCER REMOVED (if the perfusion system pressure transducer isremoved)

Lubrication pressure is monitored at 1 second intervals. If a pressureabove the high lube pressure limit is observed for 40±10 sec a standardalarm sequence is started and the LUBE PRESSURE HIGH message isdisplayed. If the alarm condition is observed not to occur for acontinuous period of 2±10 sec or the LUBE PRESSURE LOW alarm conditionoccurs, the alarm clears. This alarm cannot occur when the lubetransducer is disconnected. This alarm can occur prior to starting thepump.

Lubrication pressure shall be monitored at 1 second intervals. If apressure lower than low lube pressure limit is observed for a continuousperiod of 40±10 sec while the pump is running, a standard alarm sequenceis started and the LUBE PRESSURE LOW message is displayed. The alarm isnot issued if the pump is stopped. If the alarm condition is observednot to occur for a continuous period of 2±10 sec or the LUBE PRESSUREHIGH condition occurs, the alarm clears. This alarm cannot occur if thelube transducer is disconnected. This alarm cannot occur unless the pumphas been started at least once. This alarm does not occur in the “XD”version of the controller.

If the LOW LUBE FLOW condition is satisfied for 40±10 sec, while thepump is running, a standard alarm sequence is started and the LOW LUBEFLOW message is displayed. The alarm is not issued if the pump isstopped. If the alarm condition is observed not to occur for acontinuous period of 40±10 sec or the HIGH INFUSION RATE conditionoccurs, the alarm clears. This alarm cannot occur when the lubetransducer is disconnected or when the pump is off.

If the LOW INFUSION RATE condition is satisfied, while the pump isrunning, a standard alarm sequence is started and the LOW INFUSION RATEmessage is displayed. The alarm is not issued if the pump is stopped. Ifthe alarm condition is observed not to occur for a continuous period of10±1 min or the HIGH INFUSION RATE condition occurs, the alarm clears.This alarm cannot occur when the lube transducer is disconnected or whenthe pump is off.

If the HIGH INFUSION RATE condition is satisfied, while the pump isrunning, a standard alarm sequence is started and the HIGH INFUSION RATEmessage is displayed. The alarm is not issued if the pump is stopped. Ifthe alarm condition is observed not to occur for a continuous period of10±1 min or the LOW INFUSION RATE condition occurs, the alarm clears.This alarm cannot occur when the lube transducer is disconnected or whenthe pump is off.

Bag weight is monitored at 1 second intervals. If bag volume is observedto drop below the alarm threshold for 3 consecutive 1 second intervals,a standard alarm sequence is started and the LUBE VOLUME LOW message isdisplayed. The message is removed and the alarm cleared when the bagvolume is greater than the alarm threshold for 3 consecutive 1 secondintervals.

When a lube transducer is disconnected and then placed the controllerbegins monitoring the new transducer offset voltage. If the offsetvoltage is not between the limits after an 8 sec delay and then an 8 sectest period, a standard alarm sequence is started and the LUBE OFFSETERROR message displayed. When the faulty transducer is disconnected andreplaced with new one, the controller monitors offset voltage foranother 8 consecutive one second intervals. This cycle is repeated untila lube transducer offset is determined to be within range. The alarmclears if the offset voltage is within range for the 8 second period.When an acceptable offset has been identified, the controller then usesthe offset value until the transducer is removed. This alarm cannotoccur if the lube transducer is removed.

When a lube transducer is disconnected or not properly inserted astandard alarm sequence is started and the LUBE XDUCER REMOVED messagedisplayed. The alarm clears when a lube transducer is properlyconnected. No lube related alarms, except LUBE VOLUME LOW and LUBEXDUCER REMOVED, can occur when a transducer disconnect is verified. Thecan occur before, during or after the pump has been started but notbefore a transducer has been inserted at least once.

The time period (ΔT) between consecutive zero crossings of dP/dt ismonitored. If ΔT is outside the range for 6 consecutive zero crossingsthen a standard alarm sequence is started and the LUBE PHASE SHIFTmessage is displayed. If the alarm condition is observed not to occurfor a continuous time period of 1 second then the alarm clears.

This alarm cannot occur when the lube transducer is disconnected. Thealarm is not be issued if the pump is stopped.

The lube line is monitored for the presence of air at one secondintervals. If a bubble of sufficient volume passes the bubble detectortransducer then a standard alarm sequence is started and the LUBE LINEOPEN message is displayed.

The alarm is mutable. The alarm is latched and only cleared if the mutebutton has been pressed while the message appears on the alarm list andno air is detected in the lube line.

As a secondary indication, the yellow LED is illuminated during a LUBELINE OPEN alarm.

The blood pump 316 is controlled by the controller 332, as shown in FIG.11. Therefore, the flow rate through the blood pump 316 can be adjustedby the technician. This is accomplished in the blood pump 316 bychanging speed of the impeller 334. A technician adjusts the controller332 for attaining a desired impeller speed based on the arterialpressure of the patient and the flow rate of blood through the bloodpump 316. Generally, it is desired to maintain a flow rate of blood ofbetween 1.0 and 3.5 liters per minute through the blood pump, and anarterial pressure of 60-70 mm of mercury in the patient. The arterialpressure of the patient can be obtained from standard techniques ofobtaining blood pressure.

The flow rate of the blood through the blood pump 316 can be identifiedby measuring the impeller speed and stator current, as described in U.S.patent application Ser. No. 09/130,617 (PCT application PCT/US99/17465),incorporated by reference herein. The flow rate is displayed on thecontroller, where the technician uses the information to change theimpeller speed. The impeller speed is maintained between 3000 and 7500rpm. If the estimated flow is below a preset low flow alarm limit, a lowflow alarm is activated to warn the technician of potentially unsafeconditions, such as impeller speed too low or too high and cannulakinking or distortion. Impeller under speed can cause regurgitant flowfrom patient's artery, through the pump, and into the heart and thusimpair patient's heart function. Excessive impeller speed can causepatient's heart collapse and introduce heart damage. Cannula kinking cancause blood clotting in the cannula and lead to pump failure. Cannuladistortion may cause patient's organ under perfusion.

The low flow alarm also provides prevention of removing gases from thecirculated blood stream into patient's body due to an excessive vacuumpressure created at the pump inlet.

Since the controller is able to detect low flow conditions, which mightbe due to unsafe operation of the system, this would provide an easierway for patient care and a better safety feature to patients.

When the patient is stationary, and thus the controller is stationary,the controller and the blood pump are powered from the AC mainsavailable through the walls of the room. The controller also has abattery operation, which is used for patient transfers, and moreparticularly from the catheter lab to the ICU or operating room.

The power supply system provides power to the pump. The power supplysystem consists of a switching power supply, a battery charging supply,and the necessary control circuitry, as shown in FIGS. 16 c-16 e.

The switching power supply provides power to the controller when thecontroller is connected to AC power (with power switch on or off). Thebattery provides a minimum of 30 minutes of operation under maximum loadconditions.

A warning is generated in the controller when switching to batteryoperation to tell the user the system is operating on battery power. Alow battery alarm is generated, which cannot be muted, when the batteryoutput is less than specification giving the user warning of 10 minutesremaining on battery operation. When the battery voltage has decayed tothe battery depleted threshold, new alarm messages are displayed (PUMPAUTO OFF; RECONNECT AC PWR), the pump is shut off. The ALARM/MUTE switchwill not silence this alarm. This alarm can only be silenced byconnection to AC power.

The system is designed for a single mode of operation. All setup andservice operations are done from the normal operating mode.

The control system is divided into three distinct parts: an operatorcontrol panel, a support stand and a power assembly. The system is shownin FIGS. 16 a-16 e.

The operator control panel is an electronic control system that includesthe system computer, status display and operator controls. It isattached at about shoulder height to the support stand to provideoptimum display readability and easy hand access to the operatorcontrols. The height of the control panel can be adjusted. The operatorpanel has dual control units, a primary unit and a backup unit. The dualunit design provides dual integral displays and dual computers forredundant operation. A hinged door is used to cover the display panelnot being used (normally the backup display). A knob is provided tomanually switch control to the backup unit as described below. The doorcan be moved to cover the primary display and is mechanicallyinterlocked with the “primary—backup” control knob to eliminateinadvertently covering the active controller.

The support stand is a vertical post with a square pedestal base withcastors. It provides an attachment point for the control panel, powerassembly and lubricating fluid components. It also contains the wireswhich interconnect the system components and the height adjustmentsubsystem.

The power assembly is located at the base of the support stand andcontains the power system, the battery and implant pump driveelectronics. The system power switch is located here.

The control system architecture provides for fault tolerance whileminimizing the failure rate of the system controlling pump operation. Asshown in FIG. 16 e, the user can only turn the pump on or off and changethe speed between minimum and maximum speeds. Speed control is performedby hardware, with the user input determining voltage from apotentiometer that is then fed directly to a motor control/drivecircuit, which then feeds current directly to the motor. All othercontrol functions provide only monitoring of the system parameters,which are performed in parallel with the motor and pump operation.Should a monitor function fail, the system will maintain pump operationbut will alert the user to the failure of the monitor system. The usercan then switch to a backup control system to again begin effective pumpmonitoring. In other words, the monitoring is not directly involved withmotor operation, in which case any monitor failure might affect patienttreatment.

Pump speed is controlled by the selected (primary or backup)potentiometer (speed pot) on the control panel which is wired directlyto the motor control chip. The motor control chip independently startsthe motor and controls the speed in accordance with the speedpotentiometer setting. The CPU monitors the speed pot voltage andcompares it to the actual pump speed determined by thevoltage-controlled oscillator (VCO) frequency to confirm that they arewithin the specified tolerance. The CPU monitors pump direction via adirection detection circuit located on the power board. If the CPUdetects pump direction reversal, it provides an appropriate type 2alarm.

The control system is designed with redundancy for all subsystems(except for the lubricant infusion subsystem). The redundancy isstructured as two parallel control units with the exception of thebattery, which is structured with independent redundancy. Under normaloperation, both computers are operational but only one is in control,recording data and generating alarms based on the setting of theprimary/backup knob. A circuit is included to alarm a dual control unitfailure. The primary and backup computers are separate withoutexchanging information.

The control panel is divided into two halves: 1 primary system and 1backup system. Under normal operation, the blood pump is controlledusing the primary control unit. If a runtime failure occurs in theprimary control unit, control can be manually switched to the backupcontrol unit. Circuitry is also provided to monitor the backup computer.

Because of the requirement to always have two operational control unitsavailable before implanting the cardiac pump, when power is turned on,both primary and backup control units perform a startup self testsequence. If either computer is not functional, an alarm condition isevident. If the primary computer does not function the primary light onthe primary/backup select knob indicates the failure, the backup lightflashes green and a non-mutable audible alarm is sounded. A PRIMARY CPUFAIL message appears on the backup controller. If the backup computerdoes not run, a BACKUP CPU FAIL alarm is posted on the primary controlpanel and the backup light on the primary-backup select knob indicatesthe failure. A mutable audible alarm occurs. If the proper functioningof components in the system other than the computers must be verified,they should be checked by the operator.

Both primary and backup systems must be fully operational for thecontrol system to be used. If a startup failure is detected in eitherthe primary or backup control unit, the entire control system should berejected. If the BACKUP CPU FAIL appears on the display, at any time,then the controller should be replaced since backup patient support isunavailable.

The system power and pneumatic components are located in the powerassembly. If a failure of any power or pneumatic component occurs, thebackup component set can be selected by manually switching the controlunit on the control panel. The two redundant batteries are alwaysconnected and use semiconductor and mechanical fusing to automaticallydisconnect a failed battery.

If a primary to backup switchover is performed while the pump isrunning, the pump shuts down. If a primary to backup switchover isperformed while the pump is stopped, the pump remains stopped.

All switches are labeled and recessed or guarded to prevent inadvertentoperation. All controls occur in duplicate except the primary/backupselect knob and the power switch.

A recessed rotary knob is supplied to control pump speed. The knob doesnot have any quantitative markings but is labeled Pump RPM and “

” to indicate that turning the knob clockwise increases speed (henceflow rate). When the pump is started, it comes to a speed determined bythe angular position of the knob. The speed can then be increased ordecreased by rotating the knob. The actual pump speed is determined byobserving the RPM readout on the display which is measured directly fromthe pump drive electronics.

When an alarm condition occurs, a flashing RED light occurs, the audiblealarm is activated and an alarm message is displayed.

A rotary knob is built into the control panel which selects the operablesystem components. It is labeled “Primary” and “Backup” and has acircular indent to point to the selected subsystem.

The display screen is touch sensitive and has three main buttons:SERVICE DATA, CONFIG MENU and WEAN MENU. The CPU activates an audiblechirp when it senses a touchscreen button press.

The SERVICE DATA is used to display system parameters not needed fornormal pump operation. Pressing the SERVICE DATA button again exits thesystem parameter display.

The CONFIG MENU button is displayed when the SERVICE DATA button ispressed after power on but before the pump is started (this prevents CPUcontroller reset while the pump is running). The configuration menu is auser interface that consists of clearly labeled and intuitivetouchscreen buttons for adjusting the controller time, RS-232 portsetting, date, and language. The settings are stored in non-volatilememory and are recalled when the controller is powered up. The CPUmaintains the time/date and the CPU EEPROM holds the latest language andRS-232 configuration setting. The selectable languages are English,Spanish, German, Italian and French. The selectable RS-232 port settingsare direct (to PC) or modem.

The WEAN MENU button only appears while the pump is running or after thepump has been stopped. The WEAN MENU button replaces the CONFIG MENUbutton if the pump is started when the service data is being displayed.The WEAN MENU allows the operator to temporarily disable the PUMP FLOWLOW alarm during patient weaning.

System power is directly controlled by a guarded, manual switch. If thesystem is off, pressing the power button supplies power to thecontroller. Selection of primary or backup power is controlled by theprimary/backup knob on the control panel as described above, however,selection of primary or backup battery is automatic. Status of systempower is displayed by visible LED indicators.

If the system is on and the power button is pressed, system power isremoved and the controller stops. Any audible alarms are silenced.Battery charging continues as long as AC power is supplied.

All parameters and messages are displayed on a backlit monochromaticgraphics display with alpha numeric capability and a touch-sensitiveoverlay. The messages are grouped into three sections: Normal operatingparameters, alarms and system parameters.

During normal operation, with the pump on and no alarms, severalmessages are presented on the display. These include: SYSTEM READY,SERVICE DATA, WEAN MENU, XXXX_(RPM) and Y.YY_(LPM) where XXXX is thepump speed and Y.YY is the pump flow rate. If the pump is stopped, XXXXRPM and Y.YY LPM are replaced by the message PUMP OFF HH:MM:SS.

If an out of range reading is observed for any of the monitored systemparameters, the audible alarm is sounded and the red alarm light isilluminated. Appropriate alarm messages are displayed.

An audible alarm is provided to indicate that a new alarm condition hasoccurred. The alarm can be silenced by pushing a mute button exceptunder certain conditions.

A number of indicator lights are provided to tell the operator thestatus of the pump, the occluder, alarms, system power, and bubbledetector status.

The controller has external connections for the implant pump, systempower and external data communications.

The controller is designed so that initial set-up and testing can beperformed by a single non-sterile operator.

The pump is started by pushing the PUMP START/STOP button while the pumpis in the OFF state.

The pump is stopped by pushing and holding the Pump Start/Stop buttonfor 5 seconds while the pump is in the ON state. The typical pump stopsequence would be as follows:

Press PUMP START/STOP button.

The controller initiates the pump stop sequence by displaying the HOLDBUTTON X message (a short beep is issued).

The HOLD BUTTON X message where X=the seconds remaining until the pumpshuts down is the controller's confirmation to the operator that thebutton is being pushed.

After 5 seconds, the pump is turned off.

The PUMP START/STOP light will switches green to off.

The PUMP OFF HH:MM:SS message is displayed and starts counting. The PUMPSTOPPED alarm is posted.

If any of the alarm conditions that require shutting off the pumpoccurs, the pump is shut down and the PUMP STOPPED alarm message isdisplayed. When the pump stops, either from an operator command or analarm condition, a “PUMP OFF” timer is started and the elapsed timesince pump stop is shown on the display with the message PUMP OFFHH:MM:SS. If an primary to backup switchover is performed while the pumpis running the pump shuts down and the messages PUMP STOPPED and PUMPOFF HH:MM:SS are displayed on the backup display.

If a primary to backup switchover is performed when the pump is off thenthe pump will remain off and the messages PUMP STOPPED and PUMP OFFHH:MM:SS will be displayed on the backup display.

If the pump is restarted and runs for at least 1 second, the PUMP OFFtimer is reset to zero.

Stator current is monitored at 1 second intervals. An alarm condition isestablished and latched if the running average of any 5 consecutivemeasurements is out of specification.

If an alarm condition is detected, a standard alarm sequence is startedand the PUMP CURRENT HIGH message displayed.

Pump speed is monitored at 1 second intervals. An alarm condition isestablished if 3 successive speed readings are out of specification. Ifthe alarm condition occurs, the pump will be stopped.

Pump current is checked first. If the current for any of the previous 3readings was below the low current limit, the alarm shall be handled asa pump current low failure. If all 3 previous readings were above thelow current limit, the alarm is handled as a high speed failure.

If the alarm is to be handled as a pump speed high alarm, the pump willbe stopped. A standard alarm sequence shall be started and the PUMPSPEED HIGH message displayed.

It is normal to transport the patient from the operating room to arecovery room with the system attached to the patient and operating.This requires removal of AC power. The control system is designed for aminimum of 30 minutes of battery operation.

If the voltages on batteries A and B drop below the threshold and the ACpower is disconnected, a system power failure alarm condition isestablished within 1 second. The pump is stopped, a standard alarmsequence is started and the BATTERY DEPLETED message displayed.

The audible alarm cannot be muted. The alarm clears when the AC power isrestored.

System power (DC at the power supply) is monitored at 1 secondintervals. If 3 consecutive AC Power Lost conditions are observed, astandard alarm sequence is started. An AC POWER LOST message isdisplayed. If the AC power restored condition is established for 3consecutive 1 second intervals, the message will clear. The AC powerstatus is also echoed by the status panel indicators.

If battery A or battery B voltage drops below the battery fail voltagethreshold for 1 second, but both batteries are not below the batteryfail voltage threshold, a standard alarm sequence is started. TheBATTERY BACKUP FAIL message is displayed. If both batteries exceed theBATTERY BACKUP FAIL voltage threshold for 1 second, the BATTERY BACKUPFAIL alarm will clear.

If both the A and B battery voltages drop below battery depleted voltagethreshold for 1 second, but the system DC voltage is normal, i.e., ACpower connected, a standard alarm sequence is started. The BATTERYDEPLETED message is displayed. If the DC system voltage is normal and atleast one battery reaches the battery depleted voltage threshold, for 1second, the BATTERY DEPLETED alarm will clear.

If either the C or D watchdog (WD) battery voltages drop below the WDbattery low voltage limit or rises above the WD battery high voltagelimit for 3 seconds, a standard alarm sequence is started. The WDBATTERY FAIL message is displayed. If both C and D battery voltages riseabove a threshold but less than WD battery high voltage limit for 1second, the alarm will clear. A watchdog battery is considered depletedbelow the WD battery low voltage limit and is considered removed fromthe circuit if the voltage is greater than the WD battery high voltagelimit.

If, for 3 consecutive 1 second readings, the voltage on both batteriesdrops below the battery low voltage threshold and the system voltage isbelow the specified limit, a low battery condition is set. A standardalarm sequence is started and the BATTERY LOW message is displayed. Theaudible alarm cannot be muted while the low battery condition exists.The BATTERY LOW message will clear and the audible alarm willautomatically silence if the system DC voltage and the voltage on bothbatteries exceeds the alarm limit, specified in the alarm table, for 3consecutive 1 second readings.

If the backup unit fails, a standard alarm sequence is started. TheBACKUP CPU FAIL message is displayed. If a primary unit failure occurswhile the backup unit is selected then a standard alarm sequence isstarted and a PRIMARY CPU FAIL message will be displayed. ThePRIMARY/BACKUP CPU FAIL alarm can occur at any time when the controlleris on. This alarm is non-mutable.

The temperature of the power board case in the region of the primary andbackup motor control chips are measured at 1 second intervals. If thetemperature exceeds the temperature threshold, a standard alarm sequenceis started and a POWER ASSY TEMP HIGH message displayed. The alarmclears if the temperature drops below the alarm limit.

The AB-180 pump is controlled by a dedicated motor control chip whichhas three nested control loops. For each loop, the parameters must beselected by the designer to give the desired dynamic operation over thefull range of pump speeds.

The loop parameter settings for optimum dynamic operation are notconsistent with reliable startup performance. Startup can be erraticwith chatter and in the worst case the pump refuses to start at all.These symptoms vary with the setting of the speed control knob. Also athigher speed settings there is significant speed overshoot which couldbe damaging to blood cells. The control circuit parameters for reliablestartup at the minimum pump speed were determined, considering thespecial algorithms in the control chip that operate during startup tolimit current and sense rotor position. The parameters for optimumdynamic operation were then determined over the full speed range.

Referring to FIG. 28, the key speed control concept employed to offerstable speed and soft speed change without overshoots involves switchingbetween two different sets of loop filter components, A and B. The pointat which switching occurs is determined by the circuitry at D. Theswitching also changes the speed between upper and lower settingsprovided by the user. The circuitry at C determines the rate of speedchange between the upper and lower speed settings.

The pump speed setting is electronically overridden and held at minimumduring the startup sequence, regardless of the setting of the speedcontrol knob. Then the loop parameters are configured for reliablestartup and the pump is started. The pump starts and its speed begins toramp up. When it reaches a predetermined threshold, the loop parametersare automatically reconfigured to their optimum values for dynamicoperation and the override of the pump speed setting is released. Thepump speed is then allowed to slowly increase to the knob setting.

Pump startup is reliable and smooth since the loop parameters areoptimized for startup at one particular speed which is set by theoverride and startup always occurs at that speed.

Refer to FIG. 28 for a description of this speed modulation controlcircuitry. U1 is the motor control IC. Only the pertinent connectionsare shown. The pump speed is proportional to the voltage at the VSPEEDinput (pin 8). RUN/STOP signal is low when the pump is off and thevoltage at CISC (U1, pin 21) is high. This forces comparator U2's outputto the low state which holds transistor Q4 off and relay K1de-energized. In the de-energized position K1 has two effects. The lowercontacts of K1 cause the loop filter components connected to U1's CSCline (U1, pin 5) to be set for proper startup. Capacitor C1 is connectedfrom pin 5 directly to ground and components R1, C2, and C3 areconnected to ground through resistor R2 which provides isolation and aDC return path. The upper contacts of K1 pull the non-inverting input ofop amp U3 to ground. This causes the voltage determined by the minimumspeed set potentiometer R3 to appear at U1's VSPEED input.

When the RUN/STOP signal is taken high, U1's BRAKE line (pin 25) isreleased and the pump is started. Its speed begins to ramp up to theminimum speed setting. As U1's control loops settle to their lockedcondition, the voltage at CISC (pin 21) begins to drop. This CISCvoltage is filtered and delayed by the R4/C4 network and its drop issensed by comparator U2. U2 then turns on Q4 which energizes relay K1.U2 incorporates hysteresis which is not shown in the figure and is ahigh input impedance device to avoid loading the CISC signal. When K1 isenergized, its lower contacts connect C2 and C3 directly to ground whichsets the loop filter components to the desired configuration for normalpump operation. K1's upper contacts release U3's non-inverting input andcapacitor C5 begins to slowly charge to the voltage set by the run speedpotentiometer R5. Op amps U3 and U4 then cause the voltage at U1'sVSPEED input to be determined by the run speed setting.

It can be appreciated from the above description that the speedmodulation circuitry provides a convenient means of ramping the pumpspeed between two user selected settings in a controlled manner. Thistechnique would allow the pump output to be varied in a pulsatile mannerusing only a simple digital signal for control. The control signal couldbe provided by a simple oscillator which could have an unequal dutycycle. The time constants of the ramp rates can be adjusted as desiredby proper component selection or minor changes to the circuitry of FIG.28. Note that other more complex means could also be used to implement apulsatile flow control. Pulsatile control with this circuit conceptcould be implemented in software.

It is possible to simulate the varying blood pressure of the normalheartbeat by modulating the speed of the pump to obtain pulsatile flow.

The actual pump speed is compared to the speed potentiometer setting atone second intervals. If a deviation greater than that specified isdetected, for 6 consecutive intervals, then a standard alarm sequence isinitiated and the PUMP SPEED ERROR message is displayed. The alarmclears if the deviation is less than the limit specified in the alarmtable for one second.

The actual pump speed is monitored by the CPU after the CPU sends thepump shutdown signal. If the actual pump speed is greater than the alarmthreshold specified then a standard alaiin sequence is initiated and thePUMP SHUTDOWN ERROR alarm is displayed. The alarm clears if the pump isrestarted. The alarm clears if the pump speed decreases below the alarmthreshold when the CPU has established a pump off condition.

The pump flow estimate is monitored at one second intervals. If a bloodflow rate less than the limit specified is detected then a standardalarm sequence is initiated and the PUMP FLOW LOW message is displayed.The alarm clears if the flow rate rises above the limit specified in thealarm table. This alarm can only be disabled via the WEAN MENU. Thealarm defaults to enabled at controller power up. The alarmautomatically re-enables within a specified period of being disabled.

Another safety feature of the system is its ability to detect if themotor controller is improperly causing the pump to spin in the reversedirection. The control IC has the ability to spin the pump in eitherdirection. Unintended reverse operation is a concern to regulatoryagencies regardless of its low likelihood of occurrence.

Pump direction is monitored via a direction detection circuit located onthe power board. The circuit outputs logic high for forward directionand logic low for reverse. The direction detection circuit is monitoredat one second intervals. If pump reversal is detected then a standardalarm sequence is initiated and the PUMP DIRECTION ERROR message will bedisplayed. The alarm can occur with the pump on or off. When the pump ison the PUMP DIRECTION ERROR alarm clears if the pump reverses direction.A PUMP DIRECTION ERROR alarm when the pump is off suggests a directiondetection circuit failure and the alarm can only be cleared if the faultis repaired by service personnel.

Referring again to FIG. 28, U1 signals P1, P2, and P3 (pins 2, 3, and 4)are the drive lines to the P channel FETS in a standard three phasebridge motor driver. These signals are logic outputs which are driven ina specific sequence as the three phases of the motor are energized. Whenthe pump is spinning in the forward direction the sequence is P1, P2, P3and in reverse it is P1, P3, P2. The pulses are low for two cycles ofthe VCO clock output (pin 13) and transitions occur on the positivegoing VCO clock edge. Note that the N channel outputs (pins 9, 10, and11) are not suitable because in an analog control scheme they vary inamplitude and in a pulse width modulated scheme they are high frequencypulses that bear no relationship to the phase sequence.

The direction of pump drive is determined by examining the P linesequence using digital logic. FIG. 28 is a timing diagram which showsboth the foreword and reverse sequences. To determine direction, the P2phase is sampled shortly after the high going edge of the P1 phase. Ifthe sample is low, the direction is foreword. If the sample is high, thedirection is reverse. It will be appreciated that any phase could beused for the reference and either of the remaining phases could besampled. Also it is possible to sample both of the remaining phases.

D type flip flop U5 is used to delay the P1 signal by one VCO clockperiod. The rising edge of the delayed P1 signal then clocks D type flipflop U6 to sample the P2 signal. The sampled P2 signal appears at the Qoutput of U6. It is filtered by the R10/C6 network and applied tocomparator U7 which produces the DIRECTION output. Comparator U7 alsoincorporates hysteresis which is not shown. Resistors R6, R7, R8, and R9reduce the voltage of the P1 and P2 signals to the logic level requiredby U5 and U6. The R11/C7 network holds the direction output at foreworduntil the control loops have stabilized.

A runtime random access memory (RAM) test is implemented by periodicallychecking critical values against duplicate inverted values. If any ofthe critical variables cannot be verified then a standard alarm sequenceis started and the RAM TEST FAILURE message is displayed. The alarmclears if all critical variables can be verified in a subsequent cycleof the runtime RAM test.

A runtime read only memory (ROM) test checks the application code spacein Flash memory. This test is completed approximately every 5 minutes orless. If the test is not completed successfully then a standard alarmsequence is started and the message ROM TEST FAILURE is displayed. Thealarm clears if a subsequent ROM test passes.

The CPU supply voltage is monitored in 1 second intervals. If the CPUsupply voltage exceeds the alarm limit then a standard alarm sequenceoccurs and the message CPU VOLTAGE HIGH is displayed. The alarm clearsif the CPU voltage decreases below the specified alarm limit for oneinterval.

The CPU supply voltage is monitored in 1 second intervals. If the CPUsupply voltage drops below the alarm limit then a standard alarmsequence occurs and the message CPU VOLTAGE LOW is displayed. The alarmclears if the CPU voltage increases above the specified alarm limit forone interval.

A runtime CPU self test is completed approximately every 10 seconds orless. If the test is not completed successfully then a standard alarmsequence is started and the message CPU TEST FAILURE is displayed. Thealarm clears if a subsequent CPU self test passes.

The WD (PIC) toggles a signal to the CPU when the WD sends its strobe.When the CPU fails to detect the holdoff signal from the PIC within 1second then a standard alaim sequence is started and the message PICFAILURE is displayed. The alarm clears if the WD resumes sending CPUholdoff signals in less than 1 second intervals. In addition, the WDalso monitors the CPU communications to confirm CPU status.

The CPU initiates an air bubble detector self test approximately onceevery 1 minute. If, during the self test, the air in line response isnot confirmed by the CPU within 1 second then a standard alarm sequenceis started and the message AIR DETECTOR FAILURE is displayed. The alarmclears if a subsequent air detector self test passes.

When the controller passes its internal startup self tests successfully,the CPU displays the SYSTEM READY message. The SYSTEM READY messageremains posted while the computers are functioning normally asestablished by the runtime self tests. The only exceptions are that theSYSTEM READY message is not displayed when the configuration menu isdisplayed and SYSTEM READY is not displayed when BATTERY ON XXX MIN isdisplayed.

The pump can only be started when SYSTEM READY appears in the display.

Hardware watchdogs are provided for both the primary and backup controlunits. If the control unit selected by the primary/backup selector knobfails to start or fails during operation, the watchdog circuit alarms.The alarm is a type 2 mutable. The primary/backup switch LEDs indicatesystem status.

Pump power is controlled by removing motor power from the motor driveand pulling the brake pin of the motor control chip low. Removing powerfrom the drive circuit is needed to assure that current to the motor canbe removed even if drive transistors short. When the CPU sends thesignal to shutdown the pump it continues to monitor the VCO frequency toverify that the pump stopped.

To turn the pump on, the CPU will send a voltage level command to thepower board. This controls a relay that applies power to the pump drivechip and releases the brake line.

Pump speed is measured by counting VCO pulses from the motor drive chip.The drive chip produces 12 pulses per revolution of the motor, soRPM=pulse rate per sec×60 sec per min/12 pulses per revolution=Pulserate (Hz)×5.

FIG. 24 serves as an illustration of how the motor control chip pulsetrain is processed.

Pump flow is derived using Non-Invasive Flow Estimation Algorithm. SeePCT application PCT/US99/17465, incorporated by reference herein. Thealgorithm samples two analog voltages (16 bit, 200 Hz) that areproportional to pump current and pump speed to compute flow to within±10% of full scale. The algorithm is derived based on the force balancebetween the electric torque generated by the motor and the load torque,including the mechanical losses. The flow estimator equation is given by

$\hat{Q} = {\left( {{1.5\; K^{*}I} - {J\frac{\mathbb{d}\omega}{\mathbb{d}t}} - {B\;\omega}} \right)/\left( {f(\omega)} \right)}$

where {circumflex over (Q)} is the estimated pump flow rate, ω is thesampled pump angular velocity, f(ω) is an empirically determinedfunction of speed, K* is the product of the number of rotor poles andthe motor torque constant, J is the rotor's inertia, B is the viscousfriction coefficient, and I is the sampled pump current.

The controller continuously logs system parameters and events on anevent driven basis. The log includes a System Parameter Record and anEvent List. The entire log is sent to the serial port every 15 seconds.The serial port is configurable for modem or direct PC connection. Themaximum data rate is 19.2 kbps.

The System Parameter Record contains the following entries: current time& date; last system power-up time & date; total elapsed run time for theCPU since power-up; pump speed when pump on; pump flow when pump on andthe current Service Data Items.

The Event List contains each occurrence of an operator button press,each occurrence or clearing of an alarm and each occurrence of aprimary/backup switchover.

If the log takes longer than 15 seconds to send then the nexttransmission is delayed until the log has completed. This is to ensurethat when connecting to the modem or serial port the authorized servicetechnician receives a complete list of the most recent parameters andevents.

The current date and time are determined from the real time clocksupplied with the CPU board. The clock is settable by the user via theCONFIG MENU button on the touchscreen.

Paged RAM, other than common RAM is available on the QED4 board, address0-7FFF in Pages 1, 2, and 3. This RAM is used for the log message queue.The runtime RAM test performs a non-destructive read/write memory teston this RAM. A test is implemented by periodically checking criticalvalues against duplicate inverted values. This test is completed every10 seconds. The critical values to be verified, based on the riskanalysis, are pump_state, occluder_state, pump_speed, pump_flow,avg_pump_current, pump_current and battery_voltage.

A runtime ROM test implements a Fletcher's checksum to test theapplication code space in flash memory.

All available flash memory, including the system code is included in thestartup CRC (cyclic redundancy check) test. A 16 bit CRC is computed.The message ROM TEST is displayed during the test.

An EEPROM startup test performs a 16 bit checksum on the EEPROM memoryand compares it with the expected checksum stored in a non-volatileEEPROM memory location. The message EEPROM TEST is displayed during thetest.

A CPU startup and runtime self test performs a test of the CPU to verifythat the registers, including the accumulators, the index registers, andthe flags operate correctly. Integer and floating point arithmetic andshifting instructions are also tested. The message CPU TEST is displayedduring the startup test only.

A startup display test activates all pixels on the display screen andsubsequently clears all of the pixels. The operator must visually verifythat all pixels are activated and then cleared to confirm proper displayfunctionality. No messages are associated with this test.

A startup and runtime air detector test are implemented by toggling theair detector's self test line and confirming that the proper response isreceived from the air detector's signal line. The message AIR DET. TESTis displayed during the startup self test only.

Common RAM is the page zero memory used by all modules for the storageof local and global variables. This startup test performs a destructiveread/write memory test and restarts the QED4 after setting a uniquepattern in memory to indicate that the test has been run and that it haspassed. The message COMMON RAM is displayed during the test.

A number of human factors considerations have been applied to thesystem. These include:

Simultaneous display of system data and alarms

Functional grouping of operating parameters, operator messages andalarms on the display

Consistent alarm and data nomenclature

Positioning of the display for easy viewing with adjustable height

Audible alarming

Kick space at the base of the unit

Closed geometry handles to eliminate entanglement of clothing andequipment

The handles sized to fit the full range of nursing personnel

An equipment box for storage of manuals, cords and other materials

Display lighting adequate for both low and high brightness areas

All connections between the implant pump and the controller are made atwaist height at the control panel. All connections to remote devices aremade from the power assembly located at the base of the stand.Connections critical for safety are provided with strain reliefs and/orlocking mechanisms.

The system shall have 2 connections for data output. One RS-232connector is used to send system data to remote computers; standard DB-9connector with sockets, base panel mounted and menu configurable for useas modem or direct PC connection. One dry contact relay output isprovided for connection to a nursing alarm panel; normally closed,access via base panel mounted ¼″ female phone jack. The relay opens, tosignal an alarm condition, only when the unit is powered on and a type 1or type 2 alarm occurs.

The pump is a three phase brushless DC (BLDC) motor. The motor is drivenby a Micro Linear Corporation Sensorless Smart-Start BLDC MotorController Model ML4428. The circuit is configured for linear modeoperation to minimize noise and to facilitate flow estimation.

A data dump is made to the external data ports every 15 seconds forauthorized service personnel use only. The data stream is write only. Noexternal control of the control system is provided. The signal is sentto 1 serial port—connected at the rear base panel: RS-232, half duplex,optically isolated, using standard DB9 connector. A cover is provided toprevent the operator from accessing the serial port.

A battery load test detects certain failure modes of the systembatteries that are currently not identified by either the chargingsystem or the software monitoring. Failures that are detected are:

single shorted cells

high impedance in a cell

When the load test is activated, a high current is drawn independentlyfrom each battery by connecting load resistors across them. This highcurrent simulates the system load during battery operation. The systemsoftware monitors the battery voltage during the test. The voltage mustremain above a threshold to pass the test. The load test gives anindication of capacity since during testing the battery's internalimpedance increases as the capacity decreases.

The system can also be used for treatment of oxygenated blood withoutsurgical procedures, such as radiation or drug or gene insertion. Druginsertion can be accomplished by injecting a specified amount of aspecific drug into the system infusion IV bag. Delivery of the drug isthen specified by the amount of drug inserted and the constant flow rateof the infusion system. Alternatively, drug insertion can beaccomplished by connecting a bag, containing fluid or drug to beprofessed, to the pump inlet, either with a tube, or a channel if thefluid supply and the pump are in a single housing, and an appropriatesize of perfusion cannula to the pump outlet to access a patient's bloodstream. The desired perfusion rate can be achieved by adjusting impellerspeed of the pump. Radiation treatment can be accomplished by accessingblood flowing through the extracorporeal circuit.

The system can be used for the treatment of hemorrhagic shock, providingcirculatory support to treat patients suffering from extreme blood loss.Alternatively, the system can be used for regional blood redistributionwhen re-circulating blood of a patient is needed. The application wouldbe similar to those already discussed, with the mechanics of setup andoperation being identical. Locations for blood access are viabledepending on the purposes of treatments. For example, blood access atthe pump inflow side could be from subclavian vein, sephalicvein,jugular vein, femoral artery, or axillary artery. On the other hand,blood can be returned to patients through the outflow cannulation ataxillary artery, femoral artery, or descending aorta via axillary orfemoral artery. Selection of cannulae for different applications dependson the location of blood access and patient's size.

The pump fixation (holster) mechanism as described is to be attached topatient's leg. If other blood access sites are used to providecirculatory support, the pump fixation mechanism could be located atdifferent places of patient's body, such as the arm, torso, or shoulder,near the blood access sites by modifying the bottom shape of theholster.

Although the invention has been described in detail in the foregoingembodiments for the purpose of illustration, it is to be understood thatsuch detail is solely for that purpose and that variations can be madetherein by those skilled in the art without departing from the spiritand scope of the invention except as it may be described by thefollowing claims.

APPENDIX Direct Bio- Blood compatability Description Material ContactDuration Level Upper housing Polysulfone Yes <30 days Class VIInflow/Outflow Silicone Yes <30 days Class VI Connector Tube SiliconeAdhesive Silicone Yes <30 days Class VI Impeller Polysulfone Yes <30days Class VI Journal Polycarbonate Yes <30 days Class VI Seal CoatingPolycarbonate Yes <30 days Class VI based polyurethane

The invention claimed is:
 1. A pumping system for assisting a humanpatient's heart, comprising: a blood pump disposed outside the patient'sbody and having an inlet and an outlet; an inlet cannula configured forinsertion percutaneously into the vascular system of the patient, and influid communication with the blood pump inlet to provide blood to theblood pump; an outlet perfusion cannula configured for insertionpercutaneously into the vascular system of the patient, and in fluidcommunication with the blood pump outlet to provide blood to thepatient's vascular system; and a control system to control the bloodpump, the control system comprising at least two control units forredundant control of the blood pump, and each control unit comprising awatchdog for monitoring the control unit.
 2. A pumping system as claimedin claim 1, wherein the blood pump includes an electromagnetic orultrasonic flow probe in communication with the blood pump outlet.
 3. Apumping system as claimed in claim 2, wherein the control system isprogrammed to initiate an alarm condition when blood outflow from theblood pump outlet falls below a predetermined rate as measured by theelectromagnetic or ultrasonic flow probe.
 4. A pumping system as claimedin claim 1, wherein the blood pump is a centrifugal pump or an axialpump.
 5. A pumping system as claimed in claim 1, wherein tubing connectsthe blood pump to the inlet cannula and to the outlet perfusion cannulaand has sufficient length to position the blood pump within about threefeet of where the inlet cannula and the outlet perfusion cannula areconnected to the blood pump.
 6. A pumping system as claimed in claim 1,wherein the control system has a primary control unit and a backupcontrol unit to control operation of the blood pump.
 7. A pumping systemas claimed in claim 6, wherein the primary control unit and the backupcontrol unit each comprise an integral display.
 8. A pumping system asclaimed in claim 6, wherein operational control of the blood pump isswitched from the primary control unit to the backup control unitmanually.
 9. A pumping system as claimed in claim 6, wherein the primarycontrol unit and the backup control unit are programmed for paralleloperation but only one of the primary control unit and the backupcontrol unit actively controls operation of the blood pump.
 10. Apumping system as claimed in claim 9, wherein during the paralleloperation of the primary control unit and the backup control unit,information exchange therebetween does not occur.
 11. A pumping systemas claimed in claim 1, wherein the control system comprises an operatorpanel.
 12. A pumping system as claimed in claim 11, wherein the operatorpanel has the control units.
 13. A pumping system as claimed in claim12, wherein the control units comprise a primary control unit and abackup control unit to control operation of the blood pump.
 14. Apumping system as claimed in claim 13, wherein operational control ofthe blood pump is switched from the primary control unit to the backupcontrol unit manually.
 15. A pumping system as claimed in claim 1,wherein the blood pump is a pulsatile, electrical, or pneumatic pump.16. A pumping system for assisting a human patient's heart, comprising:a bidirectional cannula for insertion percutaneously into the vascularsystem of the patient and to extend at least into the patient's heart; ablood pump mechanism disposed outside the patient's body and connectedto the bidirectional cannula and having a blood pump for pumping bloodinto the vascular system of the patient via the bidirectional cannula;and a control system to control the blood pump, the control systemcomprising at least two control units for redundant control of the bloodpump, and each control unit comprising a watchdog for monitoring thecontrol unit.
 17. A pumping system as claimed in claim 16, wherein theblood pump includes an electromagnetic or ultrasonic flow probe incommunication with the blood pump outlet.
 18. A pumping system asclaimed in claim 17, wherein the control system is programmed toinitiate an alarm condition when blood outflow from the blood pumpoutlet falls below a predetermined rate as measured by theelectromagnetic or ultrasonic flow probe.
 19. A pumping system asclaimed in claim 16, wherein the blood pump is a centrifugal pump or anaxial pump.
 20. A pumping system as claimed in claim 16, wherein tubingconnects the blood pump to the inlet cannula and to the outlet perfusioncannula and has sufficient length to position the blood pump withinabout three feet of where the inlet cannula and the outlet perfusioncannula are connected to the blood pump.
 21. A pumping system as claimedin claim 16, wherein the control system has a primary control unit and abackup control unit to control operation of the blood pump.
 22. Apumping system as claimed in claim 21, wherein the primary control unitand the backup control unit each comprise an integral display.
 23. Apumping system as claimed in claim 21, wherein operational control ofthe blood pump is switched from the primary control unit to the backupcontrol unit manually.
 24. A pumping system as claimed in claim 21,wherein the primary control unit and the backup control unit areprogrammed for parallel operation but only one of the primary controlunit and the backup control unit actively controls operation of theblood pump.
 25. A pumping system as claimed in claim 24, wherein duringthe parallel operation of the primary control unit and the backupcontrol unit, information exchange therebetween does not occur.
 26. Apumping system as claimed in claim 16, wherein the control systemcomprises an operator panel.
 27. A pumping system as claimed in claim26, wherein the operator panel has the control units.
 28. A pumpingsystem as claimed in claim 27, wherein the control units comprise aprimary control unit and a backup control unit to control operation ofthe blood pump.
 29. A pumping system as claimed in claim 28, whereinoperational control of the blood pump is switched from the primarycontrol unit to the backup control unit manually.
 30. A pumping systemas claimed in claim 16, wherein the blood pump is a pulsatile,electrical, or pneumatic pump.